📁
ＳＫＹＳＨＥＬＬ ＭＡＮＡＧＥＲ
PHP v7.4.34
Create
Create
Path:
root
/
home
/
estate38
/
PPE.dlfoffice.com
/
Name
Size
Perm
Actions
📁
wp-includes
-
0755
🗑️
🏷️
🔒
📁
wp-admin
-
0755
🗑️
🏷️
🔒
📁
well-known
-
0755
🗑️
🏷️
🔒
📁
store
-
0755
🗑️
🏷️
🔒
📁
wp-content
-
0755
🗑️
🏷️
🔒
📁
configWVM
-
0755
🗑️
🏷️
🔒
📁
images
-
0755
🗑️
🏷️
🔒
📁
cgi-bin
-
0755
🗑️
🏷️
🔒
📁
404LSO
-
0755
🗑️
🏷️
🔒
📁
.well-known
-
0755
🗑️
🏷️
🔒
📄
wp-signup.php
34.69 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-settings.php
32.81 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-config.php
3.52 KB
0600
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-load.php
3.98 KB
0444
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-links-opml.php
2.87 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-cron.php
8.23 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-trackback.php
5.71 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-mail.php
8.96 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-activate.php
7.97 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-config-sample.php
3.7 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-comments-post.php
2.7 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-blog-header.php
0.49 KB
0444
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-active.php
261.01 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
robots.txt
0.08 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
readme.html
7.47 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
post-new.php
0.13 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
php.ini
0.1 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
license.txt
19.44 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
index.php
20.27 KB
0444
🗑️
🏷️
⬇️
✏️
🔒
📄
.htaccess
0.08 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
xjctwsbd.php
18.64 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
Edit: 41_joomla.conf
<IfModule mod_env.c> # Sourced from http://www.frameloss.org/2011/07/29/stopping-brute-force-logins-against-wordpress/ # Cleaned up/tweaked by IMH SecAction phase:1,nolog,pass,initcol:ip=%{REMOTE_ADDR}_%{SCRIPT_FILENAME},id:13060 <LocationMatch "/administrator/index\.php"> # max_attempts are the number of attempts to allow before blocking SetEnv max_attempts 10 # attempt_interval is the amount of time in seconds that max_attempts # must be reached or exceeded in, 5 attempts in 90 seconds, etc. SetEnv attempt_interval 30 # once max_attempts are met in attempt_interval block for block_for seconds SetEnv block_for 3600 # React if block flag has been set. SecRule ip:jbf_block "@gt 0" "id:13061,log,\ msg:'ip address blocked for %{ENV.block_for} seconds, more than %{ENV.max_attempts} \ login attempts in %{ENV.attempt_interval} seconds.',\ proxy:http://localhost/mod-security-error/rule-13061.html" # A 303 status will be returned whether the login succeeds or not # After max_attempts, we block. Because certain other modules may # return a 303 status (com_k2), check for option=com_login and # task=login in POST args SecRule ARGS_POST:option "@eq com_login" \ "phase:5,chain,t:none,nolog,pass,id:13063" SecRule ARGS_POST:task "@eq login" "chain,t:none,nolog" SecRule RESPONSE_STATUS "@eq 303" \ "chain,t:none,setvar:ip.bf_counter=+1,\ deprecatevar:ip.bf_counter=1/%{ENV.attempt_interval}" SecRule ip:bf_counter "@gt %{ENV.max_attempts}" \ "t:none,setvar:ip.jbf_block=1,\ expirevar:ip.jbf_block=%{ENV.block_for},setvar:ip.bf_counter=0" </LocationMatch> </IfModule> # https://www.trustwave.com/Resources/SpiderLabs-Blog/Joomla-SQL-Injection-Vulnerability-Exploit-Results-in-Full-Administrative-Access/ SecRule REQUEST_URI "index.php" \ "deny,chain,log,auditlog,status:406,id:'13600',severity:'4'\ msg:'joomla sql injection',\ tag:'WEB_ATTACK/JOOM_SQL_INJECT'" SecRule REQUEST_METHOD "^GET|POST$" "chain" SecRule ARGS_NAMES "list\[select\]"
Save